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(57) A vehicle security system bes a secure valet/programming switch 90. To either enter the system valet 
mode, or select a function ma th e waMfrrogrammtng switch, the user must first enter a valid personal access 
code via a remote con tro l tt a o so a ter 60. To accommodate various drivers of the same vehicle, more than one 
valid code can be stored in the system. Any of the personal access codes may be changed anytime, but after 
the user's present code Esc 
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V EHI CLE SECURITY SYSTEM WITH SECURE VALET SWITCH 
BAOCGROqwn OP TTfP TNVgMT Trn* 

The present invention relates to electronic vehicle 
security systems. 

Remote control auto security systems have been widely 
sold in the last ten years. Many millions of these systems 
nave been sold to date. Characteristically most, if not 
all, of the remote control auto security systems have a 
-Valet Mode- (VM) toggle switch that essentially turns the 
security system -off.- The valet mode toggle switch 
enables a vehicle owner to disarm the security system and 
to drive the vehicle if the remote control was lost or 
becomes inoperative. What is more, . it allows the owner to 
hand his car to a parking attendant, car wash service, 
etc., without relinquishing possession of the remote 
control and without being concerned whether the other 
person knows how to use the security system. 

Although the valet mode is a virtual necessity, its 
very existence leaves- the security system vulnerable to 
intruders. The reason is that security systems today can 
be simply put into the valet mode just by turning on (or 
hot-wiring) the ignition and flipping a toggle switch 
(valet switch) . The vulnerability of the security system 
due to the valet switch is fully understood by both manu- 
facturers and installers and therefore the switch is 
installed in a concealed location inside the vehicle. 
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However, since the switch needs to be put in a place 
accessible to the driver and since there are a limited 
number of suitable mounting places inside the vehicles, in 
the majority of the cases the switch is installed in 
5 predictable places either in the glove compartment or under 
the dash or seat. Throughout the decade of the 1980 9 a 
various solutions that incorporate both economy and securi- 
ty were sought but to no avail. The most obvious attempt 
was to incorporate a key for the valet switch. The problem 
10 with the key switch is that it is just as easy (if not 
easier) to hot wire it as it would be with the ignition 
switch. Thus, it did not provide any added tangible 
security. 

Other means that were used included electronic key 
15 pads which can provide excellent security if the key pad 
has digits zero to nine (10 buttons) plus at least one more 
function button. The shortcoming of the electronic keypad 
is that it is much more expensive than a simple toggle 
switch, it takes longer to install, requires higher level 
20 of installation skills, and certain vehicles may not have 
an appropriate space for mounting the key pad. 

Another method used in a limited way and all but aban- 
doned Involves thumbwheel switches. These switches are 
similar in concept to a briefcase f s thumbwheels, except 
25 when the proper code is entered the valet mode is enabled 
electronically. The disadvantages of thumbwheels switches 
are that they also are more expensive than toggle switches, 
installation takes a longer time, the user cannot change 

the code, dLt ie vixtuelly inpoaeible to enter a code in tho 

30 dark, and each time immediately after the user dials the 
code, he or she must dial any invalid code, or else the 
user's code could be read by anyone who sees the thumbwheel 
ouitah. 

In summation, even though the regular valet toggle 
35 switch provides less security because of cost and installa- 



3 



tion tine considerations, practically all of today 1 s remote 
control auto security systems, regardless of manufacturer, 
brand or system type, use it* 

5 SUMMARY OF TOE TKVprPTftW 

A vehicle security system is disclosed which incorpo- 
rates a secured valet mode ( W SVM») that provides substan- 
tial security advantages without any cost increase or added 

10 installation time. 

Rather than being used merely as an "on/off" switch as 
in the conventional security systems, the valet toggle 
switch in a c cordance with the invention is utilized as a 
means of entering codes and communication with the security 

15 system microprocessor. To either enter a valet mode or 
select a function the user first must enter a valid person- 
al access code via the toggle switch. Therefore, an 
intruder is blocked from breaching the alarm 1 s security via 
the valet switch even if the switch is installed in a place 

20 where it is in plain view and readily accessible by the 
intruder* In order to make the system further tamper 
proof, say when an intruder tries to decipher the code by 
trying various codes, the security system will ignore after 
a preset number of successive invalid entries any further 

25 switch inputs for a preset period of time. When attempts 

to decipher the code are detected, the alarm will trip and 
the siren will sound. To accommodate various drivers of 
the same vehicle, more than one code can be stored in the 
system. Upon successful entry of a valid code an acknowl- 

30 edgment is heard, and the user then has a preset period of 
time In which to place the switch in the valet position. 
When the secured valet mode is entered, both visual (flash- 
ing lights) and audible confirmations (either siren chirps, 
horn, piezo devices) may be generated. Lastly, since each 

35 car owner may have a preference for his or her own personal 
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coda the system allows for easy and secured code chang- 
ing any tiiae the owner wishes, provided that the user's 
present code Is entered prior to programming a new personal 
access code. 

5 

BRIEF DESCRIPTION OF TFTP ppftPTN^ 

These and other features and advantages of the present 
invention will become more apparent from the following 
10 detailed description of an exemplary embodiment thereof, as 
illustrated in the accompanying drawings, in which: 

PIG* 1 is a simplified block diagram of a vehicle 
security system embodying the present invention. 

FIGS. 2-6 are flow diagrams illustrating the operation 
15 of the system of FIG. 1. 

DEZMLEn DESCRIPTION OF TOE PREFERRED EMBQPp^T 

FIG. 1 is a simplified block diagram of a vehicle 

20 security system 50 embodying the present invention. The 
system incl udes a remote control transmitter 60, and 
vehicle-installed components generally indicated as 70. 
Vehicle security systems with which the present invention 
may be used are described, for example, in commonly as** 

25 signed U.S. Patents 4,887,064 and 4,922,224, the entire 
contents of which are incorporated here by this reference. 
For clarity, many of the well-known components of the 
security system are not described in detail herein. 

Preferably, the tra n smitter 60 is a multi-channel 

30 transmitter, capable of generating encoded commands for 
activating various functions. One channel is dedicated to 
activating the secure valet mode, and can be used to toggle 
the status of the system valet mode. Thus, a first activa- 
tion of the valet channel on the transmitter causes the 

35 security system to enter the valet mode. A second active- 
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tion of the valet channel causes the system to exit the 
valet node, and so on. In each case, the signal generated 
by thm transmitter and received by the vehicle installed 
components includes an access code before the system vill 
respond to commands from the transmitter • A multi-channel 
transmitter suitable for the purpose is described in 
commonly assigned U.S. Patent 4,890,108, the entire con- 
tents of which is incorporated herein by this reference . 

The vehicle- installed components 70 include a receiver 
72, which responds to commands received from the transmit- 
ter 60, a microcontroller 74 and a nonvolatile memory 76. 
Input signal .conditioning circuitry 80 conditions signals 
received from a valet switch 90, and from the typical 
vehicle inputs commonly employed by electronic security 
systems, e.g., the ignition switch, door triggers, sensors 
and the like, to be compatible with the inputs to the 
microcontroller 74. Output signal conditioning circuitry 
82 conditions control signals output by the microcontroller 
74 to drive various output devices by the several' output 
iiiias, e.g., line 102 to drive LEDe to provide visual 
indications signals, line 104 to drive an audible indica- 
tions device such as a siren, line 106 to control a vehicle 
disabling means such .as an ignition disable, fuel pump 
disable or starter disable, and line 108 to control various, 
types of vehicle devices, e*g., hood lock, door locks and 
the like. 

A power supply 84 is connected to the vehicle battery 
to supply power to the various compon^tjus 70. 

Virtually any switch can be used as the. valet switch> 
*o T httt the switch of choice is a SPOT switch having the 
following characteristics: (a) center position — open, (b) 
latched side — closed, (c) momentary side — closed. This 
is the type of switch typically used for the valet switch 
in many vehicle security systems. Thus, in FIG. 1 the 
switch 90 includes a momentary side 92, a latched side 94, 
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and a c ent e r conductor 96, which Is moved by the user Into 
contact with either side 92 or 94. The switch includes a 
spring (not shown) biasing the center conductor to return 
to the center position from the momentary side 92. When 
5 the center conductor 96 is moved into contact with the 
l a tc h aide 94, the center conductor 96 is latched to that 
position until the use moves the center conductor back to 
the center position* This configuration is selected since 
the switch's momentary side 92 lends itself for rapid entry 

10 of repeated actuations. 

To enter a code* the • 
user enters the code's digits in their order* To enter a 
digit the user taps (press and release) on the momentary 
side 92 of the valet switch 90 the number of times corre- 

15 spending to the numeral of the digit to be entered followed 
by a ration to the latched side 94 to signal the completion 
of the digit. If the code has more than one digit, this 
process repeats itself until the entire code is entered. 
The number of digits allowed for the personal access code 

20 is limited in practice only by the memory space allocated 
for the personal access code in the security system 50. 
When a correct, valid code is entered and accepted, the 
system will issue an audible acknowledgment by activating 
the siren line 104 to generate a predetermined number of 

25 chirps assigned by the system to indicate to the user that 
a valid code has been entered. 

For instance, if the code is 3, 

1. The center conductor 96 of switch 90 is pressed 
to the momentary side 92 and released a number of times, 
30 corresponding to the digit being entered, i.e., three 
momentary presses for the number 3 » 

2* The center conductor 96 of switch 90 is then 
pressed to the latched side 94 and back to the center 
position to "enter* the digit, signifying the completion of 
35 that digit. 
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The process (steps 1 and 2) 1b repeated for each addi- 
tional code digit to he entered in the case where the code 
has multiple digits. Once the code is fully entered , the 
center conductor 96 of switch 90 is set to the center 
5 position to signal to the system SO the completion of the 
code. Thereafter, upon recognition by the system of entry 
of a valid code, the system may be put into the valet mode 
by setting the switch 90 to the latched position (side 94) . 
In the valet mode, the security system is disabled, as is 
10 well known in the art. To exit the valid mode, the switch 
90 is set to the center position, i.e., out of the latch 
position. 

FIGS. 2-6 are flow diagrams illustrating the operation 
of the system 50,^ and representing functions programmed for 

15 execution by the microcontroller 74 . At the powering up of 
the security system 50 (step 200) , the microcontroller 74 
fetches non-secure-valet-mode related initialization data 
from the memory 76, and initializes the security system 50 
(step 202) in the conventional manner. 

20 After the system has been initialized, SVM data is 

fetched from the memory (step 204) , indicating whether the 
system was in the secure valet mode when power to the 
system was interrupted, and if so, how the system was put 
into the valet mode, i.e., by the remote transmitter 60 or 

25 by the valet switch 90. If the system was in the valet 
mode when power was interrupted (step 206) , and if the 
transmitter was used to enter the valet mode (step 208) , 
operation proceeds to node SVM-ON, FIG. 5. If the transmit- 
ter was not used to enter the valet mode, the system checks 

30 to determine whether the vehicle ignition switch is on 
(step 210). If on, the system assumes that an authorized 
person is in control of the veh i c le , and the s e cur i ty 
system 50 is set to the disarmed mode (step 212) . If the 
vehicle ignition switch is not on, the system assumes that 

35 the power was removed as a result of an unauthorized act, 
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and sets the security system to the tripped state (step 
214)- Operation then proceeds to step 216, where the 
system executes functions unrelated to the valet mode. For 
example, the system will generate an alarm condition if the 
5 system had been set to the tripped state (step 214} . At 
step 218, the status of an SVM lockout timer is checked, 
and if active, operation returns to step 216. The lockout 
timer is initiated by entry or a preset number of invalid 
codes via the valet switch; the system will ignore attempts 

10 to enter code data via the valet switch until the timer 
interval has elapsed. If the timer is active, the SVM mode 
cannot be entered* The SVM lockout timer is associated 
with anti-scanning functions to prevent a thief from 
attempting to defeat the security system by rapidly scan- 

15 nlng different codes into the system. If the lockout timer 
is not active, operation proceeds to node SVM OFF, at FIG. 
3. 

In the operation just described, the system will upon 
power up, initialize in the secure valet mode only if that 

20 mode bad been entered by the remote transmitter. Alterna- 
tively, the system could be configured to always power up 
in SVM if the system was in SVM when power was removed. 

Referring now to FIG. 3, commencing from node SVM OFF 
entered from FIG. 2, at step 220, if a transmitter command 

25 to enter the SVM mode has been received, the XMTR ENTRY 
flag is set in the memory 76 (step 222), the SVM flag in 
memory is set (step 224), and audible and visible acknowl- 
edgements are generated (step 226) by LED 3 and siren chirps 
by activating lines 102 and 104. Operation then proceeds 

30 to node SVM OH, FIG. 5. 

If no transmitter request has been received (step 
220), the ignition switch status is checked (step 228) . If 
the Ignition switch is not on, operation proceeds to node 
3SH (FIG. 2). If the ignition switch is on, the system 

35 determines whether any personal access code digits have 
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bean entered via the valet switch (step 230) . If no digits 
have been entered, operation proceeds to node SSR. if 
digits have been entered, the status of the code N flag is 
checked. If the flag is set, this indicates that the user 
5 has just previously programmed a new security code via the 
system programming mode. The user validates the newly 
programmed code by having just entered it again. Thus, at 
step 232, the code N flag is cleared, and the digits 
entered via the valet switch are checked to determine 

10 whether they match the newly programmed code stored in a 
new code buffer. If so, nonvolatile memory 76 is 

updated to store the new code »N W (etep 236) , and the new 
code buffer is cleared (step 238) „ If the entered digits 
do not mutch the newly programmed code, the digits are 

15 ch ec ked to determine whether they match any of the N 
security codes stored in memory 76 (steps 240-246) . If any 
of the codas are matched, then the SVM timer is started 
(step 254) , and operation proceeds to node SVMA, at FIG. 4. 
If none of the user security codes are matched by the 

20 entered digits, operation proceeds to step 248, where the 
number of received digits is tested against a preset 
max i mum nu mb er . If the received number is less than the 
maximum, operation returns to step 230* Xf the received 
number of digits exceeds the maximum permissible number of 

25 digits, the security system is set for the tripped mode 

(step 250), and the SVM lockout timer is started (step 
252). Operation then proceeds to node SSR (FIG. 2). The 
preset maximum number will typically be some multiple of 
the nominal code digit length. For example, if the typical 

30 code length is 3, then the maximum number might be set at 
9. As shown, successive entries of invalid code digits 
exceeding the predetermined maximum number will trip the 
alarm and start the lockout timer. During the lockout time 
interval, the system will ignore any signals entered via 

35 the valet switch 90. 
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At PIG. 4, com men ci ng from node SVMA, entered from 
step 254 (FIG. 3), the valet switch 90 position is checked 
to determine if it is in the valet position, i.e., the 
latched position (step 260) , indicating that the valet node 
is to .be entered. If in the valet position, the SVM timer 
is stopped (step 262), the XMTR ENTRY flag is cleared at 
the memory 76, and operation proceeds to node SVMB (FIG. 
3). If the valet switch is not in the valet position, "the 
SVM timer is checked (step 266) , and if it is still count- 
ing, operation proceeds to node PM (FIG. 6) if a program 
mode request has been made (step 266) . if no program 
request has been made, operation returns to step 260. If 
the SVM timer is not still counting at step 266, the 
entered code is cleared (step 270) , since instructions have 
not been entered within the preset time, and operation 
lir i vf h i T i to node SSR (FIG. 2) . 

At FIG. 5, commenc i ng from node SVM ON, entered from 
step 206 or step 208 (FIG. 2) or step 226 (FIG. 3), the 
security system functions are disabled at step 278. This 
is the effect of putting the security system in the valet 
mode. If a transmitter comman d has been received to exit 
the valet mode (step 280), operation proceeds to step 284, 
to clear the SVM flag in the memory 76, and to output an 
audible or visual acknowledgement that the valet mode has 
been exited (step 286). The security system functions are 
re-enabled (step 288), and operation proceeds to node SSR 
(FIG. 2) . If no transmitter command has been received, the 
system checks to determine if there has been a switch 
transition from the latch position to the center position. 
If not, operation returns to step 280 and the process 
re p c ato . In thi s valet mode, the security system is 
disabled from activating an alarm. 

FIG. 6 illustrates the programming mode, entered at 
node SB, for entering a new personal access code, needed to 
enter the secure valet mode. Techniques to enter a securi- 
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ty system program mod© by use of a valet switch have 
previously been described in commonly assigned U.S. Patent 
4,887,064, e.g., FIGS* 19A-L and column 22 et seq. ; and 
U.S. Patent 4,922,224, e.g., FIGS. 15A-T and columns 21 et 
5 seq. For example, one technique for entering the program 
mode, as described in U.S. Patent 4,922,224, is to hold the 
valet switch to the momentary side within ten seconds of 
turning the vehicle ignition switch on, until a siren chirp 
is heard, i n di c a t in g the system is ready to receive pro- 

10 gra mming instructions. In order to select a desired 
programming function, a digit associated with the desired 
function is entered. For example, to add a new personal 
access code to the stored list of valid access codes, a 
"one* is entered by toggling the valet switch once to the 

15 momentary side and once to the latched side. The system 
will first check the memory space available to determine if 
sufficient memory is available to add a new code. If 
enough memory is not available, the system can either 
provide an audible or visual signal indicating this circum- 

20 stance, and then refuse to recognize any new codes, or 
write the new code over an existing valid code stored in 
memory, i.e., erase an existing code to make room for a new 
code. If space is available, the user enters the new code 
with the valet switch. If the desired programming function 

25 is to change an existing valid code stored in memory, the 
user enters a "two" for example to select this programming 
function, and thereafter enters the new code. The system 
will change the code entered initially to enter the pro- 
gramming mode to the newly entered code. 

30 If a command to change a particular personal access 

code H is received (step 300) , then a default timer is 
started (step 302), and the new access code N is entered by 
the user (step 304) while the default timer is still 
counting a predetermined default time interval (step 306) . 

35 After the default time interval has elapsed, an audible 
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and/ or visual acknowledgement is performed (step 310) , the 
CODE H flag is set, the new code is stored in the new code 
buffer (step 314.) , and operation returns to step 300. 

If no coTfflTwmrt had been entered to change a personal 
5 access code (step 300) , operation proceeds to node PMR 
(FIG. 4) if no other command for other programming opera- 
tions has been received (step 316) • If a command for 
another programming operation has been received, e.g., one 
of the programming functions described in U.S. Patent 

10 4,922,224, the other programming operations are performed 
(step 318) , and operation returns to step 300. 

It is understood that the above-described embodiments 
are merely illustrative of the possible specific embodi- 
ments which may represent principles of the present invan- 

15 tion. Other arrangements may readily be devised in accor- 

dance with these principles by those skilled in the art 
without departing from the scope and spirit of the inven- 
tion. 

Reference should also be made to British Patent Application 
GB-A-2 275 124 froa which the present application is divided. 
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1. A vehicle security system having a secure valet mode of 
operation, comprising: 

means for performing security functions in the event 

said system is tripped; 
remote control wireless transmitter means for 
generating remote control command signals for 
said system to enter said valet mode; 
a system controller responsive to said remote control 
commands signals to enter a secure valet mode 
wherein said system is disabled from tripping and 
performing said security functions, said 
controller comprising means for putting said 
system into said valet mode in response to said 
remote control command signals ; 
wherein said valet mode may be entered via wireless 
remote control signals received from said transmitter means. 

2. The vehicle security system of claim l, wherein said 
controller further comprises means operative in the event 
said system is in the valet e mode and responsive to remote 
control command signals from said remote transmitter to exit 
said valet mode. 
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3. The system of claim 1, wherein said controller 
comprises means for comparing said remote control command 
signals to a predetermined valid access code, and said means 
for putting said system into said valet mode is operable 
only in the event said remote control conroand signals 
com p rise said valid access code. 

4. The system of claim l, wherein said remote control 
tr ansmi tter means comprises a multi-channel transmitter, 
having a first channel for transmitting encoded signals for 
arming or disarming said system, and a second channel for 
transmitting said remote control command signals for 
entering said valet mode. 

5. The system of claim 4, wherein said controller further 
comprises means operative in the event said system is in the 
valet mode and responsive to remote control command signals 
on said second channel from said remote transmitter to exit 
said valet mode. 

6. A vehicle security system having a same valet mode of 
operation substantially as herein described. 
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